Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Lh7egGQMn0hPdd05wT7Wxw4HSgM.cer
File: Lh7egGQMn0hPdd05wT7Wxw4HSgM.cer (raw, json)
Hash identifier: o/vBoxYUgH44ZSp59tZ5qDkvtBjw4b9vhirGTm5RJ0o=
Subject key identifier: 2E:1E:DE:80:64:0C:9F:48:4F:75:DD:39:C1:3E:D6:C7:0E:07:4A:03
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D1525063478A379B7CBC3D450B943E9A5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/330c7f5c-faae-4354-b920-e20bd0425bb9/0/2E1EDE80640C9F484F75DD39C13ED6C70E074A03.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/330c7f5c-faae-4354-b920-e20bd0425bb9/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 17 Jan 2024 01:59:24 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 215755
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:15:25:06:34:78:a3:79:b7:cb:c3:d4:50:b9:43:e9:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 17 01:59:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e1ede80640c9f484f75dd39c13ed6c70e074a03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b0:55:55:15:5e:f8:62:76:b9:a3:f6:e1:95:
40:c1:a6:aa:38:7c:50:35:d2:ad:85:0d:eb:3c:99:
7f:83:ac:f4:67:60:a4:5c:25:5d:c3:a8:18:6d:8a:
60:19:0e:93:f9:73:8d:31:1a:18:42:9c:f2:a0:d7:
37:8f:a2:d6:e2:bd:1b:c0:b0:e5:fe:56:5e:24:36:
01:80:dc:af:e4:ae:87:c3:d1:6b:90:eb:4d:8b:f7:
25:c4:ed:04:38:bd:0f:34:a7:18:fe:d4:68:b7:9c:
68:ff:c1:5b:75:b4:e6:31:96:a8:eb:5f:52:e4:b7:
1d:c8:bc:ed:8f:d3:07:2b:51:09:4e:b3:25:e3:5c:
aa:3c:a9:d0:c7:b3:11:d3:07:bd:eb:7f:05:fa:b4:
26:8b:77:9e:83:5b:56:bc:64:ed:b8:2c:26:65:fc:
c0:a2:29:56:f5:c8:12:af:f1:a2:5c:98:ad:b5:5d:
c4:a1:a7:cc:8d:66:a3:8e:dc:cb:10:cc:3e:bc:b3:
ea:3f:a5:0c:69:62:c5:8a:93:2f:1c:46:97:cc:6f:
fb:77:f8:2e:37:36:1b:0c:d9:ca:bd:f5:ae:40:21:
86:70:d5:f8:d5:08:4f:0a:0d:d4:89:20:5b:20:48:
3f:46:0c:08:e6:79:48:3d:0c:88:bf:49:23:d4:85:
35:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:1E:DE:80:64:0C:9F:48:4F:75:DD:39:C1:3E:D6:C7:0E:07:4A:03
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/330c7f5c-faae-4354-b920-e20bd0425bb9/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/330c7f5c-faae-4354-b920-e20bd0425bb9/0/2E1EDE80640C9F484F75DD39C13ED6C70E074A03.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215755
Signature Algorithm: sha256WithRSAEncryption
04:1b:dd:fa:13:44:60:22:93:41:b0:f4:72:71:3b:81:29:3f:
d4:97:16:da:92:35:4f:96:15:13:4d:78:2a:40:a7:09:40:b0:
72:22:ae:4b:97:a5:65:18:c4:a0:be:9a:e0:cf:2e:0f:e5:a4:
25:f7:79:22:80:ee:b3:a4:55:fe:d1:67:e1:c2:fd:cd:23:d1:
87:7b:45:bf:09:e8:39:d1:fe:0e:e2:e3:c1:27:d6:91:b4:3d:
76:b7:6f:a4:95:f5:38:73:93:d8:d9:40:65:24:86:17:cc:8f:
a3:25:1f:ed:dc:bf:2f:96:9d:71:74:94:4c:ff:d6:dd:a4:f4:
c7:ff:3b:0d:68:a4:1d:df:32:bb:00:ff:fa:f9:4d:be:f6:c6:
db:91:03:9a:47:b7:83:96:62:43:27:ad:56:bc:19:c3:ee:11:
ac:9d:cd:cc:18:e6:df:8d:88:9d:2c:b2:69:82:25:f4:06:fa:
c6:ef:8f:1d:bc:82:45:18:c6:fa:85:71:38:00:f8:c7:d3:56:
b9:6e:e3:3e:d6:82:27:a6:8a:ee:3e:b3:9b:9f:e2:17:02:7a:
50:c7:35:36:37:70:6a:96:44:8d:2c:e4:f5:ef:fd:3f:b0:7a:
67:bd:14:46:b8:0e:57:0f:0d:d9:0b:11:29:05:e8:ec:36:45:
52:4c:47:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:11:51 2024 by rpki-client on console-fra.rpki-client.org